Well, I usually stress that it's being maintained (i.e. keeps up to date with latest versions of PHP etc, so it functions, but not necessarily gets developed). However, work is done in the Google Summer of Code project to add ActivityPub support, so it can survive at least the basics of the next generation federated social protocol .)

This feature filters users who may log in via CAS. This is useful when both CAS and password authentication is enabled and there is a mismatch between some GNU social account names and CAS user names. This prevents CAS users from logging in as someone else on GNU social.

The current Atom/XML account backup contains the backupaccount HTML at the end
of the downloaded file. This change makes it so that only the XML is downloaded
by terminating the script before the HTML is served.

Here is a patch to make the cli installer not write a config file or anything else when --skip-config is given.

In GuixSD I plan to install gnu-social as a read-only package and read a config generated by Guix from /etc/.
I might send some more patches in the future as there needs to be a setting to hide the Admin panel when the configuration is done via Guix, and one of the plugins (I forgot the name I think it was something with Html Sanitize) tries to create a cache directory in the INSTALLPATH.